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Abstract. We study the arithmetic aspects of the finite group of extensions 
of abelian varieties defined over a number field. In particular, we establish 
relations with congruences between modular forms and special values of L- 
functions. 



1. Introduction 

J. Milne |16M17| has established striking connections between arithmetic and the 
extensions of abelian varieties over finite fields (see Theorem^. Our aim here is 
to relate extensions of abelian varieties over number fields to congruences between 
modular forms and special values of L-functions of motives. 

For abelian varieties A and B over a field K : consider the group Fixt 1 K (A, B) of 
isomorphism classes of Yoneda extensions of A by B in the category of commutative 
group schemes over K. This group is torsion by the Poincare reducibility theorem, 
but it need not be finite. For instance, Exk c (A,B) = (Q/Z) 4 when A and B 
are non-isogenous elliptic curves over C. If A is an elliptic curve with complex 
multiplication over C, then a beautiful result of S. Lichtenbaum |2l)l Thm. 6.f] 
states that Ext c (A, A) is naturally isomorphic to the torsion subgroup of A(C). 

When K is a number field, the group Ext 1 K (A,B) is finite (Theorem 0). We 
show that the order of Ext^-(^4, B) is related to the following objects: 

• (Corollary congruences between modular forms, when A and B are el- 
liptic curves over Q; 

• (Theorems [TJ the congruence modulus and modular degree of an elliptic 
curve over Q; 

• ( Theorem 1 10JI the special value of the L-function L(Sym 2 E, s) at s = 2 for 
certain elliptic curves E over Q. 

It is important to note that the third result is simply a restatement of the deep 
results of F. Diamond, M. Flach, and L. Guo [SUS] in our context. 
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2. Preliminaries 

Extensions over finite fields. We recall the fundamental results of Milne |lf)U17| 
on Ext (A, B) over a finite field. 

Theorem 1 (Milne (a) |161 Thm. 3]; (b) ^7]). Let A and B be abelian varieties 
over a finite field ¥ q . 

(a) The group Extj^ (A, B) is finite, and its order is given by 

#ex4 5 (as)=±^ n 

where cti and bj are the eigenvalues of Frobenius associated with A and B 
over F q , dA and ds are the dimensions of A and B, and D is the discrim- 
inant of the trace pairing Honip^ (^4, B) x Homp^ (_B, A) — > End(A) — > Z. 

(b) Let J be the Jacobian of a smooth projective curve C over ¥ q . The group 
Extp ? (J, A) is isomorphic to the Tate-Shafarevich group UI(A/¥ q (C)) of 
the constant abelian variety A over the function field ¥ q (C) of C . 

Remark. Every abelian variety A defines integral motives h}(A) and hi(A); note 
that h\ (A) is isomorphic to /i 1 (A v )(l) defined by the dual abelian variety A v . Part 
(a) of Theorem n relates the order of Extp (A, B) to the special value at s = of 
the L-function L(hi(A) ® h}(B), s) of the tensor product motive |191 Thm. 10.1]. 

Finiteness of Ext^ (A, B) over number fields. For any abelian group (scheme) 
G, let G n denote the kernel of multiplication by the integer n. For a prime p, let 
T p G = limGpm denote the associated Tate module, and let TG = limG„ denote 
the total Tate module. 

Theorem 2 (Milne- Ramachandran). Let A and B be abelian varieties over a num- 
ber field K . Then Ext^ {A, B) is finite. 

Proof. For any integer n, taking Ext^(— , B) of the Kummer sequence 
gives a short exact sequence 

(1) -> Eom K (A, B) ® Z/nZ ^ Hom x (A n , B n ) -> Ext^(A, B)„ 0, 

using Hom.K(A n , B) = HoinR- (A n , B n ). Now taking the inverse limit of Q over 
powers n — p m of a prime p and using that Hom^ (A p m , B p m ) = Hom^- (T p A, B p m ) , 
we have an exact sequence 

(2) -» Rom K {A,B)®Z p A Eom K (T p A,T p B) -> T p Ext^(A,B) -» 0. 

By Faltings' theorem §IV.l], a is an isomorphism, and so T p Ext) s: (A, B) = 
for all p. As Ext l K (A, B) n is finite for all n by JIJ, the p-primary subgroup 
Ext 1 K (A,B)(p) of Ext^(A-B) is finite for all p. To prove the theorem, it now 
suffices to show that Ext K (A, B)(p) is nonzero only for finitely many p. This 
follows from \7\ §IV.4] which says that a p in Q is an isomorphism for sufficiently 
large primes p. □ 
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Remark, (i) In the case of an elliptic curve A over Q, the results of J. -P. Serre [21] 
provide upper bounds on the order of Extq(A,A). (ii) There are explicit bounds 
(see [141 Cor. 1]) for the primes dividing #Ext^( A, B). (iii) The group 
is not invariant under isogeny. 

Representability issues. Fix abelian varieties A and B over a field K . The group 
E*xt K (A, B) is similar to the group Ext^A, G m ), but there are some differences. 
For example, the functor S i— > Extg(A x S, G m ) on the category of schemes over K 
is representable (by the dual abelian variety). However, the corresponding functor 
for Extjf(A, B) is not representable. If L is an extension of K, then the natural 
map F,xt 1 K (A, B) — » Ext^(A, B) need not be injective. In fact, if L/K is a Galois 
extension with Galois group G, the kernel of this map can be computed via the 
exact sequence 

-> H\G,Hom L (A,B)) -> Ext^(A,S) -> Ext[(A,S) G . 

Over a number field if, the group Ext^(A, G m ) can be infinite whereas Ext^-(A, B) 
is always finite. 

3. Congruences between modular forms 

We will maintain the following notations throughout this section. Let if be a 
number field with ring of integers and discriminant D. Let A and B be abelian 
varieties over K, and let R > 1 be the least integer such that both A and B extend 
to abelian schemes (denoted A and 23) over 0[i]. Let 

S:=R [] P> 

p prime 
3p|P> e(p)>p-l 

where e(p) is the ramification index of p in 0. Now take Ext^j i j (A, 23) for the 

Ext-group in the category of commutative group schemes over 0[-^]. The necessity 
of changing from R to S will be explained below. 

Proposition 3. For abelian varieties A and B over a number field K , the natural 
map Extgj i j {A, 23) — > Ext^(A, B) is an isomorphism. 

Now suppose that A and B are elliptic curves. Let p be an ideal of coprime to 
S. Both A and £? have good reduction at p; let A and i? denote the corresponding 
elliptic curves over F p . 

Theorem 4. Let A and B be elliptic curves over a number field K , and let e be 
the exponent of Exts: (A, B). For a prime ideal p of coprime to S, 

#i(F p ) = #S(F p ) (mode). 

This theorem has the following corollary for congruences between Fourier coef- 
ficients of modular forms. We provide two proofs of this corollary. The first is a 
direct application of Theorem 0] The second proof, found by Ribet after reading a 
previous version of this paper, is direct and relies on the theta operator. 

Corollary 5. Suppose A and B are elliptic curves over Q of conductors M and 
N respectively. Let f = a n<l n and g = Yl °nq n be the associated normalized 
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newforms of A and B, and let e be the exponent of Extq(A, B). Then, for any 
integer n with gcd(n, 2MN) = 1, 

a n = b n (mod e). 

Remark. It is possible to strengthen the corollary. Since / and g depend only on 
the isogeny class of A and B and yet the group ExtQ(A, B) is not invariant under 
isogeny (in general), one can replace e in the corollary above by (i) the exponent e' 
of the group F,xtq(A' , B') where A' and B' are isogenous to A and B over Q; or, 
(ii) the least common multiple of the set of all e'. 

Proof of Proposition^ Let n be any positive integer. We first show that the nat- 
ural map 

b : Hom [j.](yi n , S„) ^> Hoin^ (/!„, £?„) 

is an isomorphism. This follows from standard patching arguments jl 51 pp. 43-45] 
once we show that, for each prime q coprime to S, the natural map 

Hom 0t| (A n , 3„) ^ Bom Kq (A n , B n ) 

is an isomorphism. Let q be the residue characteristic of q. The second map is 
clearly an isomorphism if q \ n: the etale group schemes A n and B„ over SpecO q 
are determined by the Galois modules A n (K q ) and B n (K q ) 15, pp. 43-45]. In the 
case that q \ n, write n — dr with d a power of q and r coprime to q. We apply 
|261 Cor. of Thm. 4.5.1] to the commutative finite flat group schemes Ad, 23 d over 
SpecOq, which implies that the natural map 

Hom 0q (.A d ,23 rf ) -» Rom Gal(Wq/K<t) (A d (K q ),B d (K q )) 

is an isomorphism. As the result |261 Cor. of Thm. 4.5.1] assumes that the ramifi- 
cation index e(q) of q is less than q — 1, we are forced to switch from R to S. 
We obtain a commutative diagram from Q with exact rows 

Hom x (A, B) ® Z/nZ >■ Hom K (A„, B n ) >■ Ext^(A, B) n — 

(3) ajf fef) cf( 

Hom 0[ i] (A, S) ® 1/nZ Hom 0[ i, (An, 2„) Ext^ i ] (A, 2)„ 0. 

The second row is obtained by the analogue of using — > A„ — > .A —* .A — » 
§11.5] . The vertical maps are the natural restriction maps. Now, a is an isomorphism 
by the Neron mapping properties of A and 23. By the preceding paragraph, b is 
also an isomorphism. Therefore, c is an isomorphism. □ 

Proof of Theorem^ Let p be a prime of 0, coprime to S, with residue characteristic 
p. We obtain the following diagram that can be appended to Q , 

0^Hom o[ i ] (yi ) ®)(8>Z/nZ^Hom o[ ^](yi n ,S n )^Exto [i] (A,S) n ^0 

(4) h\ 4 J 'l 

Hom Fp (A, B) ® Z/nZ — »- Hom Fp (A n , B n ) — ^ Ext Fp (2, B)„ 0. 

Put a = h o a -1 , [3 = i o b^ 1 , and 7 = jo c^ 1 . It is important to note that 

/? : Horner (A„, B n ) -> Hom Fp (1„,B„) 

is injective: if gcd(n,p) — 1, this is clear; and if n = p r , this follows from the 
faithful nature of the functor G ~-> G Xq p F p which maps commutative finite flat 
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group schemes over P of p-power order to their special fiber (see Thm. 4.5] and 
1 101 Thm. 1, p. 171; Thm. 2, p. 217]). These references give the required result as 
the ramification index e(p) is less than p — 1. The injectivity of /3 provides an exact 
sequence 

(5) — > kcr(7) — > cokcr(a) — -> coker(/3) — > coker(7) — > 0. 

We can now complete the proof of the theorem. We consider the non-trivial case 
that #A(F p ) ^ #B(F p ). This implies that Hom Fp (A, B) = 0, and so combining 
©-© and Theorem we have the injectivity of 7 : ~Eixk l K {A,B) Extp (A,B). 
By Theorem ^a), 

#Ex4 p (l,B) = (#A(F P ) -#B(F p )) 2 . 

Moreover, since A and -B are elliptic curves, Theoremnjb) and the Cassels-Tate 
pairing combine to give 

UI(B/¥ P (A)) = T xT, 

for some abelian group T. Thus the exponent e of Extp (A, B) divides #T = 
|#A(F p ) - #B(F P )|. This, with the injectivity of 7, gives 

e| (#4(F p )-#B(F p )), VpjS. 

□ 

Proof of C'orollary\^ The corollary follows almost immediately from Theorem 0] 
We need only note that since K = Q, the primes which divide 5 are exactly the 
primes which divide 2MN. The congruence for all n with gcd(n, S) = 1 follows 
since / and 5 are Hecke eigenforms. □ 

Remark. Suppose that K = Q and that i? is odd. (i) The map Ext^ij (.A, CB) — > 
Exto(j4,B) may not be an isomorphism. However, it is injective. As a is an 
isomorphism even over by the Neron mapping property, it suffices to show that 
the map Hom Z [j_j(yi„, 25 n ) — > HomQ^n, B n ) is injective. Given that b is injective 
over Z[i], it suffices to check that the map Homz 2 (.A n) !B Jl ) — » HomQ 2 (A„, B n ), 
with n = 2 r , is injective. This is clear [20 p. 152]. Thus, the Ext-group over Z[^] 
might be smaller than Ext ^j(A, B), and so a potential analogue of Theorem 0] 
will be weaker. 

(ii) In addition, the definition of [3 over Z[Jj] is problematic, due to the non- 
exactness of the Neron model functor for p = 2 (see ^ Ex. 4, p. 190] for a coun- 
terexample to P Thm. 4, p. 187]). 

Direct Proof of Corollary\^ (This proof is due to Ribct.) Since / and g are Hecke 
eigenforms, it suffices to show that a p = b p (mod A) for all primes p \ 2MN and 
prime powers A = £ m dividing e. Fix now such p and A = £ m . 

Suppose first that p / f. Let Gq := Gal(Q/Q). Now letting a S Gq be a 
Frobenius element at p, the Eichler-Shimura relations |121 Thm. 4.2.2] dictate that 

o~ — a p a + p — on A\, 

a 2 — b p a + p = on B\. 

Now from Q with n = A, it follows that there is a Galois equivariant morphism 
a : A\ — > _Ba with exponent A. Because a is GQ-equi variant, it follows that the 
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operators a p o~ and b p o~ agree on the image of a in B\, which has exponent A. Hence 
a p = bp (mod A). 

Now suppose that p = I. In particular, I \ 2MN . Now by the preceding 
paragraph, we see that a n = b n (mod A) whenever n is coprime to 2MN£. Let / 
and g be modular forms with Fourier expansions 



DC 



/ = a » 9 "' 9= Y bnq71 - 

n—l n—1 
gcd(n,2A/JV) = l gcd(n,2MJV) = l 

(These modular forms can be obtained by twisting twice by appropriate quadratic 
characters, and as such have level dividing AM 2 N 2 .) Thus, if we let = q-^ be the 

usual operator on modular forms, we see that m annihilates / — g modulo A. 
In particular, as power series in q 1 

e(f-g) = (modi). 

Since i is odd, the operator is injective modulo £ on modular forms of weight 2 
§11]. Therefore / = g (mod t). Moreover, if to > 1, we see that annihilates 
(/ — 9)1^ modulo £, and thus / = g (mod £ 2 ). By induction, f = g (mod A). □ 

Remark. (Ribet) When e is odd, the arguments in both proofs of Corollary[5]imply 
that a n = b n (mod e) for gcd(n, MN) = 1 instead of gcd(n, 2M N) = 1. In some 
sense, having the operator injective modulo odd primes is similar to having 
the absolute ramification index of Z p strictly less than p — 1 in the first proof of 
Corollary [5J 

4. Modular parametrizations and congruence moduli 

We now investigate how the theory of congruence moduli of Hida Ribet |2*2*] 
and D. Zagier j^Hl fits in with the Ext-group. 

Let Jq(N) be the Jacobian of the modular curve Xq(N) over Q, and let S2(Tq{N)) 
be the space of weight two cusp forms on Tq(N). For an elliptic curve A over Q of 
conductor N, let / — &n<?" € S2(To(N)) be its associated normalized newform. 
The congruence modulus of A |28l §5] is 

3.g = E M" e {f) x n Z[g] so that 
b n = a n (mod to) for all n 

where (f) ± Q S f 2(r (A r )) is the orthogonal complement with respect to the Peters- 
son inner product. The restricted congruence modulus of A is 

3<7 = E b nq n e if) 1 - H Z[g] so that 

b n = a n (mod r) for all n with gcd(n, 2N) = 1 

Assume that A is an optimal quotient of Jq(N) (i.e. a strong Weil curve) and that 
4>A '■ Xo(N) —> A is its modular parametrization. This induces an exact sequence 
of abelian varieties over Q, 

(6) ij: Q^C ^ J (N)h A^Q. 

A well-known result of Ribet and Zagier is that: the degree c?a of 4>a divides 
nriA, i- e. 

d A | m A . 



rriA '■= max < to G Z 



r^4 := max < r € Z 
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Of course tua divides r a- Our next result, that the exponent eA of Exto(j4, C) sits 
between oIa and ta, ultimately relies on the Eichlcr-Shimura relations. 

Theorem 6. With notations as above, one has 

d A \e A \ "r a ■ 

Remark. Since dA is unbounded, Theorem El shows that the order of Ext,g>(v4., C) is 
unbounded. 

In general, eA does not divide the congruence modulus m^. The analogous 
result for vha requires a refinement of ExtQ (A, C), which involves the Hecke algebra 
T = Z[Ti,T 2 , . . .] associated with J (N). Namely, let Ext Q T (A, C) be the Yoneda 
Ext-group in the category of commutative T-group schemes over Q, i.e. groups 
G together with a homomorphism T — > EndQ(G). Write eAj for the exponent 
of Ext^ T (A, C). We show below that the natural forgetful map Extq^(A, C) — > 
ExtQ (A, C) is injective, and thus eAj \ &a- 

Theorem 7. With notations as above, one has 

d-A | ga, t | rn A - 

The sequence © is also an exact sequence of T-group schemes over Q. For any 
integer n, we have the following commutative diagram with exact rows, 

Horn;;.- (A, C) <g> TLjnL HomQ, T (A„, C n ) Ext Q>T (A, C) n — 

Hom Q (A, C) <g> Z/nZ — Hom Q (A n , C„) — Ext Q (A, C)„ 0. 

The bottom row is precisely and since the Kummer sequence — > A„ — > A — > 
A — > is a sequence of T-group schemes, the top row is obtained in the same manner 
as Q but with the requirement of T-equi variance. Note also that the top row is 
an exact sequence of T-modules. Now since HomQ(A, C) = = HoniQ iT (A, C) and 
the map k is injective, it follows that l is also injective. Alternately, any element of 
ExtQ T (A, C) which splits in ExtQ(A, C) is split by a T-equivariant morphism. By 
Theorem|21 the injectivity of l shows that ExtQ T (A, C) is finite. 

Proposition 8. The order of r] in ExtQ T (A, C) is equal to the degree of 4>a- 

Proof. Let dA = deg^. Because A is an optimal quotient of Xq(N), the dual 
0* : A — > Jo(N) of 0* is injective, and the composition <fi* o <fi* e HomQ(A, A) is 
multiplication by g?a- From the exact sequence — > A — > Jq(N) — > C* — > and 
the fact that HoniQ(A, C*) = 0, it follows that the map 

Hom Q (A, A) ^ Hom Q (A, J (AT)) 

induced by 0* is an isomorphism. Furthermore, the map 

Hom Q (A, A) -> Hom Q (A, J (iV)) -> Hom Q (A, A), 

induced by 0* o 0*, is multiplication by d^, and so the image of HomQ(A, Jq(N)) 
is precisely ^(HohiqIA, A)). 

The long exact sequence for Exto(A, — ) applied to r\ begins 

-> Hom Q (yl, J (iV)) ^ Hom Q (A, A) Ext Q (A, C), 
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and the image of an endomorphism a £ HomQ(A, A) in Fjxtq(A, C) is the pull-back 
a*rj. Therefore, because Houlq(y4, A) = Z, it follows that the image of Homq(A, A) 
in Ext^(A, C) is the subgroup generated by r\. Thus the order of r\ in Ext^(A, C) is 
d,A, and since 77 represents a class in ExtQ T (A, C) C Ext^A, C), we are done. □ 

Now there are two ways to define a T-module structure on ExtQ(A, C), namely 
by pushing out along C or pulling back along A. These two T-module structures 
need not coincide. However, because ExtQ T (A, C) consists of classes of exten- 
sions that are T-equi variant, it follows that the two T-module definitions restricted 
to ExtQ T (yl, C) are the same. In fact, ExtQ T (A, C) is the largest subgroup of 
Ext^ (A, C) on which the two T-module structures agree. 

Proof of Theorem^ By Proposition [S] it suffices now to prove that eAj \ tua- Let 
I A and Ic be the kernels of the maps T — » EndQ(A) and T —* EndQ(C). By the 
general considerations of 0] §2], we see that tua is the exponent of Ta,c : = T/(7^ + 
Ic) as an abelian group. Now clearly both I a and Ic annihilate Extjj j(A, C), and 
so Extqj(A,C) is a T^c-module. Thus we must have eAj \ tua- D 

Proof of Theorem^ Again by Proposition [5] it suffices to prove that ca \ i~a- Let 
T' C T be the subalgebra generated by all T n with gcd(n, 2N) = 1, and let I' A and 
I' c be the kernels of the maps T' -> End Q (A) and T' -> End Q (C). From [|j §2], 
it follows that ta is the exponent of T^ c := T' /(I' A + I' c ). If we can show that 
Ext^ (A, C) is a T^ ^-module, then we are done. Namely, we need to show that the 
two operations of T' on Ext^A, C) coincide. 

Consider T p with p \ 2N. Since Hom Q (A, C) — 0, JTJ implies that Ext Q (A, C) n = 
HomQ(A n , C n ). From the Eichlcr-Shimura relations |121 Thm. 4.2.1], we have that 

(7) T p = F + V GEnd Fp (J), 

where J is the reduction of Jo(N) modulo p, and F and V are the p-th power 
Frobenius and the Verschiebung on J. As in the natural map 

(8) Hom Q (A„, C n ) <-> HomF p (A n , C n ) 

is injective. Since both A and C are subabelian varieties of Jq(N), the action of 
T p on A n and C n is determined by the restriction of 0. In particular, for any 
a £ HomQ(A„, C„), its image a £ Homf p (A„, C„) satisfies 

5oT pIa„ = t pIc„ 0<5 - 
The injectivity of JSJ) shows that in fact aoT p \A„ — Tp\c n oa i an d we are done. □ 

Corollary 9. If the conductor N of A is square-free, then oIa — £a,t — m A ■ 

Proof. For prime N, Ribet and Zagier |281 Thm. 3] have shown that oIa = niA- 
For square-free N, that oIa — m,A has been proved recently by Ribet as a 
consequence of his proof of a conjecture of A. Agashe and W. Stein. □ 

Remark. If N is prime and if the form g = '^2,b n q n £ (/) H Z[g], which gives 
b n = a n (mod ta) for all n with gcd(n, 2N) = 1, also satisfies 62 = &2 (mod ta), 
then in fact oIa = ca.t = rriA = ca = t a by the Sturm bound |25j . 
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Example. Theorems El and are best possible in the following sense. The mod 3 
representation of the elliptic curve 90C1 in of conductor 90, 

A : y 2 + xy + y = x 3 - x 2 + 13x - 61, 

has image (JJ) |21l Thm. 3.2]. Likewise, the mod 3 representation of the elliptic 
curve 90 Al in also of conductor 90, 

B : y 2 + xy = x 3 — x 2 + 6x, 

has image (J *). Both A and B are strong Weil curves. By their mod 3 rep- 
resentations, there is a non-trivial element a £ HomQ(A3, B$), which induces 
a homomorphism a : A3 — > C3, where C is the kernel of Jo (90) — -> A. Thus 
Exto(A, C)s = Homq(A 3 , C3) has a non-trivial element of order 3. However, direct 
computation provides = 16 and = 16. In particular, ^ r& and \ m^. 

Remark. If A is an elliptic curve over Q and (j) : J —>■ A realizes A as an optimal 
quotient of the Jacobian J of a Shimura curve, then we have an exact sequence 

T): 0-^C^J^A^O. 

Theorem [5] suggests that the exponent of Exiq(A, C) provides a "congruence mod- 
ulus". In fact, the Hida constant ca defined by E. Ullmo |57| p. 326] is the order 
of T) E Ext^(A,C). 

5. Special values of L-functions 

We provide a restatement in terms of Ext-groups of the deep results of Diamond, 
Flach, and Guo [SJ|S] on the Bloch-Kato conjecture. 

Symmetric square of an elliptic curve. Let E be an elliptic curve over Q 
of conductor N with End^i?) = Z. Consider the symmetric square L-function 
i(Sym 2 E, s) of E [§]. Note that 

L(Sym 2 E,s) = L(Sym 2 hi(E), s) = L(Sym 2 h\E), s + 2). 

The Bloch-Kato conjecture Eq. (2)] on the special value at s — 2 of L(Sym 2 E, s) 
states that 

L(Sym 2 £,2) #ffl(Q, ,4(2)) n 

1 ' m °(Q, -4(1)) • ##°(Q, A{2)) 11 Cp - 

For the sake of brevity we refer to Flach |3 §§0-1] for definitions, and we use his 
notation. 

For a field K, set Gk '■— G&\(K / K) . Let Pe denote the finite set of rational 
primes consisting of (a) all £ \ 2N; and (b) all £ such that the Galois represen- 
tation on Ee restricted to Gf , where F = Q(y (— 1)( £_1 )/ 2 £), is not absolutely 
irreducible. For £ ^ Pe, the £-part of the Bloch-Kato conjecture has been proved 
by Diamond, Flach, and Guo 5, Thm. 0.2], Thm. 8.9]. The following theorem 
is a reformulation of their result in terms of Ext-groups. 

Theorem 10. If E is an elliptic curve over Q with EndW(i7) = Z. then up to 
powers of £ for £ € Pe , 

£(Sym 2 £,2) ^ #LU(Extl(£, £)) 

[ } m #Ext^£;,i?)-#Extl(£;, J B)(l)^ll Cp - 
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Proof. Because of the results Thm. 0.2] and [HI Thm. 8.9], it suffices to match 
the terms in © with those of ifTHjl. 

The total Tate module TE of E is a rank two module over Z := kmZ/nZ. By the 
Weil pairing, TE is isomorphic to the Tate twist TE y (1) of the dual module TE y . 
From J2Jl, we see that TExt^(_E, E) is isomorphic to the quotient of Endj (TE) by 

the Z-submodule generated by the identity map. Via the self-duality End^ (TE) = 
TE <g> TE V , we have 

(11) TExt^(£,£)-(Sym 2 Ti;)(-l). 

The terms in the denominator of can easily be identified as 

#-ff°(Q, A(l)) = #H°(G q , (Sym 2 TE)(-1) ® Q/Z), 

#ff°(Q, A(2)) = #if°(G Q , (Sym 2 TE) ® Q/Z). 

By dJ) , the former is # Ext-^E, £) G « , and the latter is # Exti(.E, £J) (1) G « . More- 
over, the numerator of © is 

#ffl((Sym 2 TE) ® Q/Z) = #IJJ((Sym 2 TE)(-1) ® Q/Z), 

where the equality follows from 8, Thm. 1]. The proof of the theorem is then 
complete by the following lemma. □ 

Lemma 11. Let E be an elliptic curve over a number field K with End-^(_E) = Z. 
For any odd integer n, Ext^(-E, E) n = Ext^(£', E)^ K ■ 

Proof. By taking the long exact sequence of Gj<--cohomofogy of Q with K = K, 
we obtain an exact sequence 

-> Uom K (E,E) ® % Z/nZ -> Eom K (E n , E n ) -> Ext^(B, E)% K 

-» Hom(Gx,Z/nZ) H\G K , Hom w (E n , E n )). 

If / £ ker 0, then 0(/) is represented by a coboundary which takes values in the 
trace space of Hom-j^(E n , E n ). However, by definition <f>(f)(a) = f(a) ■ id, for 
a G Gk- Thus for all a € Gk, we have 2/(cr) = 0, which implies / = 0. Therefore, 
<t> is injective, and the result follows from □ 
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